CLASS NUMBERS VIA 3-ISOGENIES 
AND ELLIPTIC SURFACES 
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I ' Abstract. We show that a character sum attached to a family of 3- 

f~^ , isogenics defined on the fibers of a certain ehiptic surface over ¥p relates 

CSJ ' to the class number of the quadratic imaginary number field Qiy^—p)- 

;_( , In this sense, this provides a higher-dimensional analog of some recent 

, ^ ' class number formulas associated to 2-isogenies of elliptic curves. 

in ■ 

I — r 1. Introduction 

h: 

^ ■ From the days of Diophantus, elliptic curves have long attracted the 

r-| ' interest of mathematicians. More recently, elliptic curves have found appli- 

cd I cations in diverse areas such as the proof of Fermat's last theorem, factor- 

, G^ l ing large integers, and in cryptography. An area worth particularly men- 

! tioning is the study of various character sums on the points of an elliptic 

>• . curve, which have been used to sum primes, find generators for elliptic curve 

\^ • groups, and determine the structure of such groups by demonstrating the 

Y^ • uniformity of the distribution of certain points (see, for example, [1], [2], [3], 

rr^ ' II] 5 [5] 5 [H], [S], or [H]). A new direction in this area has been to examine 

O ' integer- weighted character sums over elliptic curves [6], [7]. In this vein we 

7—i I recall two results, whose interplay motivates the main result of this paper. 

'i> \ First, to certain 2-isogenies r of elliptic curves defined over F„, McLeman 

^ ! and Rasmussen attach an integer- valued character sum Sr, which is shown 

c^ ! to be divisible by p (see [B]). The subsequent analysis of the quotient S^/p 

turns out to be of arithmetic significance, providing a new class number 

formula strikingly similar to a classical result of Dirichlet's. Namely, we 

have 

(1-1) -lSr = h;, 

where 

k 



^—p)) a p = 3 (mod 4) 
^ ' otherwise. 



Here p is a prime and h{Q{y/ —p)) denotes the class number of Q(a/— p)- 
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A second family of results from [7j computes the mod-p value of a much 
larger class of analogous character sums attached to isogenics of larger de- 
gree, and specifically, finds several new classes of character sums which are 
also evenly divisible by p. In light of the above class number formula, it 
seems of interest to determine the analogous quotients. The current article 
addresses the analysis of such quotients, focusing on one particular family 
of 3-isogeny sums satisfying precisely this divisibility condition. We show 
that when this family of character sums is viewed as a single character 
sum over an elliptic surface, these quotients also compute class numbers of 
quadratic imaginary number fields. In this sense, this can be viewed as a 
higher-dimensional analog of (11. ip . 

Statement of Results — We begin with some notation. Let p and i 
be primes, with p = 1 (mod i). Let t: E ^^ E' he an £-isogeny of elliptic 
curves defined over the finite field ¥p. Let ( = Q denote a fixed primitive 
complex £-th root of unity, and choose a point Q G E'(¥p) — T{E(¥p)). We 
will see in Corollary [2] that the particular choice of Q does not matter. From 
the isomorphism E'{¥p)/T{E{¥p)) = Z/iZ, for each P e E'{¥p) we have 
P — kQ e T{E{¥p)) for a unique < k < i — 1. We define the character Xr 
attached to r by: 

Xr{P) = C\ where P - kQ e r(E(Fp)). 

In particular, Xt-(-P) = 1 if and only if P is in the image of r. 

We adopt the following notation for lifting from ¥p to Z: for a G ¥p, let 
{a} denote the unique integer < {a} < p — 1 such that {a} mod p = a. 
For the remainder of this paper we will use E{¥p) to denote the set of affine 
Fp-rational points on the curve. That is, we do not include the point cxd in 
E{¥p). Finally, given a point P G E{¥p), let x{P) be the x-coordinate of P. 

Notation in hand, we turn to more precise formulations of the two afore- 
mentioned motivating results. The first is the definition of the character 
sum Sr appearing in (11.11) . Let t: E -^ E' he a. 2-isogeny defined over ¥p, 
and let Xt he the character attached to r described above. To such a r, we 
introduce the integer-valued character sum 

(1.2) Sr:= Yl {<P)}Xr{P)- 

PeE'iFp) 

For a concrete example of a situation in which (II. ip holds, one can take 
([B], Proposition 2) E and E' to both be the curve y"^ = {x + 2)(x^ — 2) over 
the finite field ¥p for any prime p > 3 of good and ordinary reduction, and 
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T a degree-2 endomorphism of E arising from complex multiplication on E 
(by Z[-\/— 2]). If we let p = 131, for example, then it can be checked that 
Sr = —655, and indeed 655/131 = 5 is the class number of Q(a/— 131). 

The second motivating result concerns a second class of isogenies r which 
give character sums divisible by p, but for which we do not know the analo- 
gous value of Sr/p. To wit, let p = 1 (mod 3), and let E^/^p be the elliptic 
curve given by y"^ = x^ + d. If we set d' = —27d G ¥p, the function 

fy^ + 3d y{x^ - 8d) 
Tdix,y) := (^^^, -, 

defines a 3-isogeny from E^ to E^'. Let us further suppose that (- 

to isolate the interesting cases of the character sun|j. Then we have the 

following divisibility result: 

Theorem 1. Let p and t^: Ed ^ Ed' be as above, with character Xt^- Then 

is an integer divisible by p. 

This theorem can be established using the techniques in [7]. We include a 
proof in this work, as it is a stepping stone to prove our main result. Worth 
mentioning is the following corollary of Theorem [H 

Corollary 2. Since Sr^ G Z, we note that Sr^ is independent of the choice 
of the point Q G Ed'(¥p) — Td{Ed{¥p)) used to define Xt^- 

Unlike the sum in (II .ip . however, there does not seem to be a direct re- 
lationship between the individuals sums Sr^ and any relevant class number. 
Instead, we will see that class numbers arise as a sum of quotients Sr^/p as 
d runs over the set of all quadratic residues mod p. In fact, the process of 
summing over all such d permits a concise reformulation in terms of elliptic 
surfaces, which we describe now. We begin with the substitution d = z"^, 
so that running over all 2; G F^ is equivalent to running over all square d 
twice. After the substitution, we arrive at the algebraic surface 

S/Fp-. y^ = x^ + z^. 

More specifically, S is an elliptic surface, as the projection tt : £^ — )■ A^ 
from S on to the afiine z-line equips the surface with a natural elliptic 



If d is a non-square mod p, then Ed has a Fp-rational subgroup of order 3 but no Fp- 
rational 3-torsion point. The isogeny r corresponding to this subgroup is now surjective, 
and the character Xt degenerates to the trivial character. 
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fibration, with a single singular fiber over z = 0. Let S = S — Eq denote 
the complement of the singular fiber. The above isogenies r^ = Tz-2 can 
now be interpreted as maps from one fiber of S to another, namely from 
the fiber over z to the fiber over —27z. We patch these fiberwise-defined 
isogenies together to give a global endomorphism r: S ^ S which respects 
the fibration in the sense that 7r(Pi) = n{P2) implies 7r(r(Pi)) = 7r(r(P2)) 
for points Pi, P2 ^ ^(^p)- We simply set 

f y' + 3z' y{x^ - 8^^) _ 
r{x,y,z) = — , ,-27z 

We also extend the character Xt^^ defined a priori on each fiber to a 
global function on S: For P = {x, y, z) G £, we have (x, y) G -E22, and hence 
it is sensible to write 

Xr{P) = Xr^2{x,y)- 

Note that, as before, Xt{P) = 1 if and only if P is in the image of r. Finally, 
we construct the higher-dimensional character sum. Define 

S^ = Y,{x{P)]Xr{P). 
P&8 

The principal result of this work is the following theorem. 

Main Theorem. Let p = 1 (mod 3), and let £, r, Xt-, and Sr be as above. 
Then 

-Or - Up- ^-. 

Our technique for calculating the sum Sr defined on £ is essentially 
a division of labor between two approaches. We will independently sum 
"vertically" (over fibers) and "horizontally" (over sections) over our surface. 
Section 2 deals with the former, analyzing the fiber-wise isogenies r^ defined 
in the Introduction, and we address the global calculation of Sr in Section 
3. 

2. FiBERWISE-SUMS AND THE TATE PAIRING 

We maintain the notation established in the introduction. Namely, we 
have p = 1 (mod 3), a value rf G F* with ( - j = 1, and the 3-isogeny of 
Fp-curves r^ : E^ -^ E^i with d' = —27d. Note that the conditions on p and 
d imply 

d\ f —3\ f —3d\ 



p J \ V / \ V 
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We begin with an analysis of the contribution to Sj- coming from a given 
fiber. Set 

PeE^,(Fp) 
so that by viewing Sr as a sum over fibers, we see 

p-i 

d=0 

As in |6j, the first step in evaluating Sr, is to use the Tate pairing to 
provide explicit formulas for the computation of Xt,- Let us briefly recall 
the construction of the (complex-valued) Tate pairing attached to r^, and 
its connection to the character Xt,- Let f^ be the dual isogeny to r^ and 
consider the point T = (0, 3\/—3d), which generates of the group Ed'[Td](¥p). 
One begins by finding a pair of functions /t and qt such that div(/T) = 
3[T] — 3[oo] and fr ° Td = Qt- The Tate pairing 

^-- J^F^W^ ^ ^'^'[^^](^^) -^ /^3(C), 

is the (bilinear and non-degenerate) pairing given by the cubic residue sym- 
bol 

V P / 3 

where [P] denotes the image of P in the quotient Edi(¥p)/Td{Eii{Wp)), and 
after choosing an arbitrary point R G Ed'{¥p) — (T), we set 

f /(P)' [P] i (\T\) 

We use /i3(C) to denote the set of cubic roots of unity in C. 

Remark 3. The definition of the Tate pairing in (12. ip actually outputs a 
value in ¥*/{¥*Y, so we compose this version of the Tate pairing with an 
isomorphism F*/(F*)'^ = fis^C). In the proof of Theorem El we will choose 
the isomorphism which forces the Tate pairing to coincide with our character 

Proposition 4. Letting E^., E^', t^, and T as above, we can take 



/ ; y ~ V—3d 

— 3v — 3a and qt = 

in the definition of the Tate pairing. 



fT = y — 3v — 3(i and qt 

X 
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Proof. We easily check that Jt is of degree 3 and vanishes only at T, so 
div(/T) = 3[T] — 3[oo]. Now we need only to verify that as functions on Ed', 
Jt o Td is the cube of gx- For a point P = {x,y) G Ei(¥p) (i.e., satisfying 
x^ = y"^ — d), we have 

_ y{y^ - 9d) - ?,V^^{y'' - d) 
x^ 



y - V-M 

X 

as desired. D 

Theorem 5. With E^, Td, and T as above, we have the following explicit 
formulas for the character Xr/- 

( (^J a [P] = [kT],k = 0,1,2, 

(2.2) XrSP)=^rAnT) = \ .[/Ji, 1 

[ ( ^ I jg otherwise. 

Note in particular that Xr^iP) = 1 if and only if P G Td{Ei{¥p)). 

Proof. Let us abbreviate t = Td for the duration of the proof. For the 
statement that Xt-(-) = i^T{[-],T), we first show that a point P e Ed'{¥p) is 
in the image of r if and only if ^p^-{[P],T) = 1. By bilinearity, ?/',-( [P], kT) = 
ijJr{[P],T)^. As E2[f] is generated by T, P pairs trivially with T if and only 
if it pairs trivially with every element of E2 [f] . By the left non-degeneracy 
of ipT, this occurs if and only if [P] is the trivial class of E2(¥p)/T{Ei(¥p)), 
i.e., P is in the image of r. This shows that Xr(-) = V't([-],-P) or Xt(-) = 
ip~'^{[.],P). As in Remark El we now choose the correct isomorphism to 
achieve equality. 

We proceed to the second equality in the statement of the theorem. 
Since the bottom case is the definition of the Tate pairing for such points 
(given the calculation of /t from the previous proposition) , we only need to 
address the top case. For this it suffices to show that Xt(T) = 1 if and only 
if I ^^ j =1. Let a be a square root of —3d in ¥p, such that T = (0, 3a). 

Suppose first ( — ^ ) = 1, so that we have some 5 G Fp with 5^ = —Ad. 
Then 

-12da\ 
0, 



-M J 



CLASS NUMBERS VIA 3-ISOGENIES 7 

which shows that XriT) = 1. 

For the converse, we assume there exists x,y E ¥p, with t{x, y) = (0, 3a). 
This requires that ^ ^ = and ^^^— j — - = 3a. From the first of these 
equations we see that y'^ = —3d. As the point (x, y) is on the curve y'^ = 
x^ + d, it follows that x^ = -Ad, so (^) =1. D 

With these exphcit formulas for Xr^ i^^ hand, we now prove Theorem [TJ 

Theorem 1. Let p,Ed, Ed', and r^ be as above. Then 

is an integer divisible by p. 

Proof. Since the values of {x{P)} are for P G (T), they contribute trivially 
to the sum (no matter the value of x^^(P)). This allows us to avoid breaking 
the sum into cases based on the results of the Tate pairing. We have 



2 {.iP)hAP)= E WP)}( ^'^>-^'^ ) 

y — 3\/— Sd^ 



p— 1 p— 1 

= E E - 



y=0 x=0 ^ ^ ^3 



E(^^^^) E 



x. 



y=0 ^ ^ ^3 2;=o 



Now each inner summand here is the sum of the lifts of the mod-p cube 
roots of y'^ + 27d. This sum is necessarily zero mod p since the coefficient 
of x^ in the polynomial x^ — [y"^ + 27d) is trivial. Thus the whole sum is 
divisible by p, as desired. D 

3. The Global Sum 

We recall the global setting from the introduction. The surface S is the 
complement of the singular fiber over 2; = in the elliptic surface defined 
over ¥p by y"^ = x^ + z"^. As such, S is the union of fibers over z for non-zero 
z e ¥p. For P = {x,y,z) G £, we have {x,y) G Ez2, and we glue together 
the fiber- wise isogenics r^ to a global function r and global character Xr by 
defining 

Xt{P) = Xro{x,y). 



8 C. MCLEMAN AND D. MOODY 

The global sum Sr from the main theorem now decomposes as (twice) 
the sum of the fiberwise-sums addressed in the previous section: 

Sr := 5^{X(P)}X.(P) = 2 J2 Sr,. 

Pe£ de¥p 

As an immediate corollary of Theorem [H we have the divisibility of the 
global sum. 

Corollary 6. With notation as previously defined, p \ Sr- 

We now let /3 denote a fixed square root of —27 (mod p), and introduce the 
characteristic function 

, , fl a y"^ = x^ — 27 z'^ (modp), 

e{x,y, z) := < 

I otherwise 

on points (x, y, z) G F^. The explicit computation of the Tate pairing, using 
the function fx = y—3\/—3z = y—jHz in the fiber E^-^ provides the following 
formula for S^- 

p-ip-i p-i , 

5. = EE E ^''-^'- 



2=1 y=0 x=l 
x^= 

p— 1 p— 1 p— 1 



x^=y^+27z'-' 



(3-1) =EEE-C—r-) <-^y^^)- 

z=ly=Ox=l ^ ^ ^3 

We re-arrange the orders of summation and use symmetries of the func- 
tion e{x,y,z) to simplify the sum. First, we write the sum as 

p— 1 p— 1 p— 1 



,._i „_n ,-1 V y / 3 



x=l y=0 2 = 1 \ '^ ^3 

and for a fixed x and y we address the innermost sum 

six,y):=y2\ ) e(x,y,z). 

^V P Js 

Note for a fixed x and ?/, there exists a z (with 1 < z < p — 1) such that 

2 3 

e{x, y, z) = 1 if and only if ^_~^ is a square mod p. In this case there are 
precisely two such z's, which we will denote by ±Zo- We then have 

six,y) = (y^^] +fy+P'^ 



P / 3 \ P 

1 + 1 = 2 if(^)3 = l, 

( + (^^ = —1 otherwise. 
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Here we have used that ( ^ ^^° j and ( ^±^ j are multiphcative inverses 
by the calculation 



y-/3zo\ fy + Pzo 

3 



y' + 27^0' 



X 
P/3 



1. 



P /3V P Js \ P 

Note that zo = zo{x,y) can be written (only slightly abusively) as 



-27 



and so we have /Szq = ±y y^ — x^. To summarize, the innermost sum s{x, y) 
evaluates as one of three possible cases depending on x and y: 



(3.2) 



s{x,y) 



if 
if 

if 



= 1 and 
= 1 and 



y±^Jy'^-x'i 



2/±a/ 



y^ — x-' 



7^1- 



Recall from equation (13 .ip 
(3.3) 



p—i p~i 
Sr = ^x^s{x,y). 

x=l y=0 



Before we evaluate the new inner- most sum, we need a technical result. 

Lemma 7. Let x 7^ be a fixed element of ¥p. Then 

{p-l)/2 if (f)=-l, 
(p-3)/2 if 



ye¥,: 



X'- 



P 



1. 



Proof. It is easy to see the number of m, f G ¥p with uv = x^ is p — 1: for 
any non-zero u, let v = x^/u. For each such solution, let y = {u + v)/2 and 
c = {u — v)/2, which is equivalent to u = y + c and v = y — c. Thus, the 
number of solutions to {y + c){y — c) = y"^ — c^ = x^ is also p — 1. We may 
rewrite this equation as y^ — x^ = (? . 

Now suppose first x is not a square in Fp. Then x^ is not a square, and 



so there are no values of y such that y^ 



0. For each non-zero c. 



the values ±c are distinct and give the same value for (? . We see there are 
(p — l)/2 values of y for which ( ^ ~^ j = 1. 

If instead x is a square in Fp, then so too is x^ and there will be two 
values of y for which y^ — x^ = 0. This leaves p — 3 solutions to y"^ 



X 



with c 7^ 0. Again, as ±c both lead to the same value of c^, we find there 
are thus {p — 3)/2 values of y for which ( ^ ~^ 1=1. D 



With Lemma [TJ we can now easily establish the following lemma. 
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Lemma 8. For a fixed a: 7^ 0, 

P-i 



XI ^(^'^) 



X 



j/=0 ^^ 

Proof. Suppose first that x is not a square. We can ignore the values of y 
for which f ^ ~^ j 7^ 1, as then s(a;, y) = and they do not contribute to 
the overall sum. So we assume y'^ — x^ is a non-zero square in Fp. We now 
claim that as we run over these values of y, the values y ± A/y^"^-a?^ are 
distinct. If this were not the case, then there would exist a yi and 1/2 such 
that 



yi ± \Jyl -x^ = y2± \Jyl - x\ 
Squaring both sides of this equation and simplifying, we see 



yi{yi ± \jyl - x^) = 2/2(2/2 ± ^2/2 - x^)- 

As X 7^ 0, then yi ± a/^/i — x^ ^ 0, and similarly for ^2- By assumption, 
y\ ± \/y\ — x^ = ^2 ± \/y\ ~ x^, and as this is non-zero we can divide 
through by it to see that y\ = y^- 

From Lemma [71 there are (p — l)/2 values of y with ( ^ ~^' j = L Sub- 
stituting these values into y ± a/^/^ — x^ will result in p — 1 distinct non- 
zero values in Fp. It follows that there are (p — l)/6 values of y such that 

^ ^^ — ^ ' = 1 (or ^ or C^). So in this case, using (13. 2p we see that 

3 



p — 1\ fp — 1 



p-i 
^s{x,y) = 2 

y=0 

= 

' X 

We similarly examine the case when a; is a square in Fp. By Lemma [7] 
again, there are (p — 3)/2 values of y with ( ^ ~^' j = 1. These are the only 

values for which s{x, y) ^ 0. As we run over them, then y ± ^Jy"^ — x^ will 
run over p — 3 distinct non-zero values in Fp. The two values not obtained 
are when y = ±Xy/x, as then y"^ = x^ and so ( ^ ~^ j = 0. But note that 
then y ± a/?/^ — x^ just equals y, and y = (±a/x)^. In short, the values of 



yifcyV 



will be equidistributed amongst 1, C, and ( , except for the 
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two values in F* both of which have it equahng 1. So then, 



■ p 
p-i 



j/=0 ^ 



p — 1 \ fp — I 



-2 



-1 

This completes the proof. D 

Finally, we can complete the proof of the main result. 

Theorem 9. We have 

c 

_ — /)*_ Ez:! 

p % 2 ■ 

Proof. By equation (13. 3p and Lemma |H1 we see that 



x=l 



x=l ^^ ^ x=l 

ph; - ^. 



X, 



We have used Dirichlet's result that 



E-(^) = -p^;. 



x=l 

This completes the proof. D 

4. Conclusion 

It would be interesting to know whether other families of elliptic curves 
or surfaces can be found which yield class number formulas similar to the 
results in this paper. All families of 3-isogenies that we investigated which 
provided class number formulas ended up being isomorphic to the curves 
y^ = x^+d. It would also be interesting to find analogous formulas for curves 
with isogenics of degree greater than 3. As mentioned in the Introduction, 
some divisibility properties have been shown in |7j, however not much is 
known about the corresponding quotients. Finally, we leave it as future 
work to analyze related character sums, where we weight by other integer 
valued funtions other than x{P). Preliminary work using y{P) has been 
shown to have relations with class numbers. 
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